run-tailscale-funnel

Expose a local HTTP server publicly via Tailscale Funnel with verification.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/yigitkonur/skills-by-yigitkonur-secondary --skill run-tailscale-funnel
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: run-tailscale-funnel
Source: https://github.com/yigitkonur/skills-by-yigitkonur-secondary/tree/main/skills/run-tailscale-funnel
Command: npx skills add https://github.com/yigitkonur/skills-by-yigitkonur-secondary --skill run-tailscale-funnel

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires tailscale, dig, curl, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Expose a local HTTP server to the public internet using Tailscale Funnel, enabling demos, webhooks, and browser automation without complex infra.

Core Features & Use Cases

  • Canonical operator for Funnel mappings that ties a local port to a public TS.net URL, with preflight checks and multi-step verification.
  • End-to-end workflow for Step 1–7: bind local app to 127.0.0.1, select a Funnel slot, map, then verify ACL gate, ingress connectivity, and external reachability.
  • Real-world use: share a local dev server with teammates or QA devices, or demo a webhook receiver without exposing internal networks.

Quick Start

Run the funnel-up.sh script with your local port and a free Funnel port to create the public URL, then check the three rungs and share the URL.

Frequently Asked Questions about run-tailscale-funnel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I expose a local server to the public internet for webhooks?

To expose a local server to the public internet, this Skill uses Tailscale Funnel to map a local HTTP port to a stable public TS.net URL, running preflight checks and verifying DNS, TLS ingress connectivity, and external reachability.

What is the best way to get a public URL for a local development server on macOS?

The best way to get a public URL for a local development server on macOS is using Tailscale Funnel, which provides a canonical operator to bind your local app to 127.0.0.1 and map it to a public TS.net URL without exposing internal networks.

Does Tailscale Funnel require specific ACL or DNS setup before mapping a local port?

Yes, Tailscale Funnel requires validating device-side setup and ACL gate DNS before mapping, ensuring your local port binds correctly to 127.0.0.1 and passes multi-step verification for TLS ingress connectivity.

How do I verify external reachability after starting a Tailscale Funnel mapping?

To verify external reachability after starting a Tailscale Funnel mapping, run the provided verification commands to check the three rungs: ACL gate DNS, TLS ingress connectivity, and external reachability using curl and dig.

Can I use Tailscale Funnel for agent browser testing and demos?

Yes, you can use Tailscale Funnel for agent browser testing and demos by tying a local port to a public TS.net URL, allowing QA devices and teammates to access your local HTTP server without complex infra.

What are the limitations of using Tailscale Funnel to expose a local HTTP server?

Limitations of using Tailscale Funnel to expose a local HTTP server include dependencies on tailscale, dig, and curl, and the necessity to bind your local app specifically to 127.0.0.1 across macOS or Linux environments.